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GETTING STARTED 


Connect an RS-232 terminal to the cable coming from J1 of 
the CPU support card. The terminal should be set for full 
duplex at one of the following rates: 192000, 9600, 1200, 
300, 150, or 110 baud. The software-selected baud rate 
feature of the CPU Support card is used to automatically 
determine the baud rate of the terminal. By hitting the 
carriage return no more than four times, the sign-on 
message should appear. If it does not, reset the computer 
and try again. If it still does not sign on, check all 
connections carefully. 


If Sense Switch 0 is a one (position 1 of S2 is closed), 
then the monitor will not sign on after baud rate selection 
but instead will automatically boot the disk. This is 
equivalent to the Boot command with no parameters. 


Directly below the sign-on message there will be a greater- 
than symbol, >. This is the Monitor prompt, and indicates 
that the Monitor is ready to accept a command. The input 
buffer allows commands of up to 80 characters in length. 
While typing the command line, <backspace> and <rubout> or 
<delete> may be used to back up to correct a mistake, while 
@ cancels the line and re-issues the prompt. Typing 
<carriage return> either causes the command to be executed 
or an error to be reported. Most errors are syntax errors, 
and an arrow followed by the word "Error" will appear under 
the first bad character. If an error occurs, no part of the 
command is executed except during boot or flag replacement 
(see Boot and Register commands). 


Monitor commands are available to display, alter and search 
memory; to do inputs and ouputs; to boot the disk; and to 
aid in debugging 8086 programs. The debugging commands 
allow you to execute a program in a controller manner, 
observing its behavior. This controlled execution may be 
done either by single-stepping or through execution with 
breakpoints. 


Single-stepping is done with the Monitor's Trace command. 
By using 8086 hardware trace mode, a single instruction can 
be executed, and the resulting effects on the registers or 
memory displayed. Even ROM may be traced, and every 
instruction is traced correctly (unlike 8080 or 280 
debuggers). 


Getting Started 


Execution with breakpoints (Go command) allows you to 
quickly execute previously tested program portions but stops 
program execution if a breakpoint is reached. Breakpoints 
require more care than single-stepping since they can only 
be used in RAM at the address of the first byte of an 8086 
opcode. 


Both methods of controlled execution allow you to modify or 
examine CPU registers. A register save area is maintained 
in memory: just before execution, all registers are set 
with values from this area; and when control is returned to 
the monitor, all registers are saved back in this area. The 
Register command allows this area to be displayed or 
modified. 


Execution of any command may be aborted by typing Control-C. 
Typing Control-S during output causes the display to pause 
so it may be read before scrolling away; any key (except 
Control-C) may be typed to continue. 


If a user program is executing as a result of a Boot or Go 
command and interrupts are enabled, then the console may 
interrupt the program and return control to the Monitor. 
Typing any key causes the interrupt, saves program status, 
and prints a register dump; except that Control-C inhibits 
the register dump. Note that complete program status is 
always saved, and execution may be continued with a Go or 
Trace command. 


The Monitor requires .5K of memory at address zero. 
Specifically, interrupt vectors are kept at locations 4-7, 
OCH-OFH, and 64H-67H, while scratch pad ram, input buffer, 
and stack use less than 256 bytes beginning at 100H. User 
programs must not modify these locations if the Monitor is 
to be used for debugging. 


PARAMETERS 


All commands of the Monitor accept one or more parameters on 
the line following the command letter. These parameters may 
be separated from each other and the command letter by 
spaces or commas, but one of these delimiters is required 
only to separate consecutive hex values. Most parameters 
are one of the following types: 


<BYTE>, <HEX4>, <ADDRESS> - A hexadecimal number with no 
more than 2, 4, or 5 digits, respectively. Thus, <BYTE> 
becomes an 8-bit value, <HEX4> a 16-bit value, and <ADDRESS> 
a 20-bit value. If too many digits are entered or a non-hex 
character is typed, the error arrow will point to the 
mistake. Hex A-F must be in upper case. 


<RANGE> - A <RANGE> is either <ADDRESS> <ADDRESS> or 
<ADDRESS> L <HEX4>. The first form specifies the first and 
last addresses affected by the command. The second form 
specifies a starting address and a length. For either form, 
the maximum length (first address - last address + 1) cannot 
exceed 10000H, and this limit may be as low as OFFF1H due to 
limitations of working within a segment. (Specifically, 
[starting address modulo 16] + length must be <= 10000H.) 

An "RG Error" results if the length is too large. To 
specify a length of 10000H with only four digits, usea 
length of zero. Note that the "L" in this form must be 
upper case. 


<LIST> - This is always the last parameter ona line and may 
extend to the end of the input buffer. It is actually a 
series of one or more parameters, each of which is either a 
<BYTE> or a <STRING>. 


A <STRING> is any number of characters (except control 
characters) enclosed by either single (') or double (") 
quotes. Since the opening and closing quotes must be the 
same, the other type may appear in the string freely. If 
the same quote as opened the string needs to appear within 
it, it must be given as two adjacent quotes. The ASCII 
values of the characters inthe string are used as a list 
of bytes. 


COMMANDS 


A command is executed by typing the first letter of its name 
(upper case only) followed by any parameters. If the first 
letter on the line is not recognized as a command, the error 
arrow will point to it. Commands are listed below in 
alphabetical order, with the forms of all parameters shown. 


BOOT COMMAND 


B 
B <ADDRESS>...<ADDRESS> 


The Boot command loads the first sector of track 0 into 
memory starting at 200H. Up to ten 5-digit addresses 
may be specified; too many will cause a "BP Error." 
After the sector is loaded, breakpoints will be set at 
these locations. Then all registers will be set from 
the register save area, except that the Code Segment 
will be set to zero, and the Instruction Pointer will 
be set to 200H - thus a jump will be made to 200H. The 
user stack pointer must be valid for this command to 
work. See Go command for more information. 


This command works in three steps: 
} The disk sector is loaded. 


2. The Code Segment and Instruction Pointer are set 
in the register save area. 


3% A Go command is executed. 


The result is that an error ina breakpoint address 
will not be found until after the sector is loaded and 
the register save area changed. Thus it is not 
necessary to use another Boot command to correct the 
errror; a Go command with the corrected breakpoints 
will do. 


Commands 


The example below shows how Boot can help test an 
experimental 8086 program. The program to be tested 
fits into one 128-byte sector and has been placed on 
track 0, sector 1 of a disk. The program is loaded 
with the Boot command but execution does not begin 
because a breakpoint is set at 200H, the first byte of 
loaded program. Before testing, the program is moved 
to 400H, just above the interrupt table, and CS and IP 
are adjusted. 


SCF 8086 Monitor 1.4 

>B200 

AX=0000 BX=0000 CxX=0000 [tX=0000 SF=0COO KP=0000 SI=0000 [tI=0000 
IS=0040 ES=0040 §5=0040 CS=0000 IP=0200 NV UF EI FL NZ NA FO NC 


> M 200 L80 400 

>RCS 

CS 0000 

240 

>R OIF 

IF 0200 

20 

PR 

AX=0000 BX=0000 CX=0000 [IX=0000 SP=0COO BF=0000 SI=0000 [1I=0000 
TIS=0040 ES=0040 SS=0040 CS=0040 IP=0000 NV UF EI FL NZ NA FO NC 


DUMP COMMAND 


D <ADDRESS> 
D <RANGE> 


The Dump command displays memory contents in hex and 
ASCII. If only a starting address is specified, 80H 
bytes are dumped; otherwise the specified range is 
displayed. To help pinpoint addresses, each line 
(except possibly the first) begins on a 16-byte 
boundary, and each 8-byte boundary is marked with a 
"_", Non-printing characters are shown as a "." in the 
ASCII dump. 


>011400 L29 
00400 FF FR FF FF F7 7F FF FF-FF FE 7F FF FF FF FF FF ele eWe ree ~eevves 
00410 [ID FR DF FF CF FF FE DF-FF FF 7F FR FR FD FF F7 WW .0.% ee ettdow 


00420 BF FF BF FF BF RF 6F FF-FF PiP PPOs. 

*D445 463 

00445 FF DF 7F-F9 FF 7E FF FE FF FF FF cae 
00450 FF FF FF EF FE FE FE DF<FF D7 FF FE EF FE FR OFF 9 oc04cs ocellsouase 
00460 9F FF FA FF sete 

=II@0 


00080 FF DF FF FF DF FF FF FF-FS FF FF FD FF FS FF 7F 9 siseneesteedottes 
00090 CE FF FF FR FF FE FF FF-7F FF FE FA FIl FA FF FR Neeteteses edz. 
OOOAO FF FF FF FF FF FF FF FF-FF FF OFF FF OFF FF DF DIF  sseseveveeeeeenn 
OOORO FF FF FR BF FF FF SF EF-FF FF FA FF FF ODF F7 FD «st ?ev OeeFe o> 
OOOCO FF FF FF FF FF FF FF FF-7F FF FF FF FF E& FF FF  seveeeeeceeeefas 
OOOD0 FF IF FF FF FF DIC FR 7F-FE FF FF FF FF DR ED FF sieee\fe%eeeeDme 
OOOEO FF FF FF FF FB FF FF FF-FF FF FF FF FF FF SF FF 9 seseleveveeesens 
OOOFO IF F7 FF TIE FF FF FF BII-BF BF FO FR ODF FF ODF DF 9 wet. =? Patio. 


Commands 


ENTER COMMAND 


E <ADDRESS> <LIST> 
E <ADDRESS> 


In the first form of the Enter command, the list of 
bytes is entered at the specified address, with the 
command being executed and completed upon hitting 
<carriage return>. If an error occurs, no locations 
are changed. 


The second form of the Enter command puts the Monitor 
into "Enter Mode", starting at the specified address. 
After hitting <carriage return>, the address and its 
current contents will be displayed. You now have 
several options: 


i Replace the displayed value with a new value. 
Simply type in the new value in hex, using 
<backspace> or <delete> to correct mistakes. If 
an illegal hex digit is typed or more than two 
digits are typed, the bell will sound and the 
character will not be echoed. After entering the 
new value, type either <spece>, "-", or <carriage 
return>, as defined below. 


2s Type <space> to display and possibly replace the 
next memory location. Every 8-byte boundary will 
Start a new line with the current address. 


a4 Type "-" to back up to the preceding memory 
location. This will always start a new line with 
the address. The "-" will not be echoed. 

4, Type <carriage return> to stop the command. 


*ESOO 2499%A ’Test’ 10 


>I! 500 L10 

00500 24 09 OA 54 65 73 74 00-00 20 00 00 00 40 01 00 $..Tests. 6++@., 
>ESO8 

00508 00. 

00507 00. 

00506 74. 00.49 

00508 00.4E 20.47 00.0 00.0 00.0 40.0 01.0 00. 

00510 60. O1. 01.76 O00, 


>IS0O 513 
00500 24 09 OA 54 65 73 74 49-4E 47 00 00 00 00 00 00 $.+TeEStINGs sees 
00510 60 O01 76 00 ave 


> 
° 


Commands 


FILL COMMAND 


F <RANGE> <LIST> 


The Fill command fills the specified range with the 
values inthe list. If the list is larger than the 
range, not all values will be used; if the range is 
larger, the list will be repeated as many times as 
necessary to fill it. All memory in <RANGE> must be 
valid for this command to work properly. If bad or 
non-existent memory is encountered, the error will be 
propagated into all succeeding locations. 


“F400 L28 "Helr® A II 


>1400 L30 

00400 48 65 6C 70 OA Ol 48 65-6C 70 OA OL 48 65 6C 70 Helr..Helr.-Helr 
00410 OA OD 48 65 6C 70 OA OL'-48 65 6C 70 OA OD 48 65 »+Help.sHelr. He 
00420 6C 70 OA OF 48 65 6C 70-FF 7F FF FF FF FF F7 FF lr. Hele seeeeWe 


GO COMMAND 


G<ADDRESS>...<ADDRESS> 


The Go command sets all registers from the register 
Save area. Since this includes the Code Segment and 
Instruction Pointer, this implies a jump to the 
program under test. 


This command allows setting up ten breakpoints. 
Attempting to set more than ten will cause a "BP 
Error." Breakpoints may be set only at an address 
containing the first byte of an 8086 opcode. A 
breakpoint is set by placing an interrupt opcode (0CCH) 
at the specified address. When that opcode is 
executed, all registers are saved and displayed, and 
all breakpoints locations are restored to their 
original value. If control is not returned to the 
Monitor by a breakpoint or interrupt, the breakpoints 
will not be cleared. 


The user stack pointer must be valid and have six bytes 
available for this command to work. The jump to the 
user program is made with an IRET instruction with the 
user stack pointer set and user Flags, Code Segment 
register, and Instruction Pointer on the user stack. 
Thus if the user stack is not valid, the system will 
crash. 


The program below is an infinite loop of 16 INC Ax 
instructions followed by a jump to its start. First 
breakpoints are used to execute a few instructions. 


Commands 


Then a Go without breakpoints allows continuous, full- 
speed execution which is terminated by an interrupt 
from the keyboard - in this case, 


“F400 L10 40 
>E410 ER EE 
>D400 L1i2 


00400 40 40 40 40 40 40 40 


00410 EB EE 


s, 


>G410 


AX=0010 KX=0000 
['S=0040 ES=0040 


»G400 412 


AX=0010 KX=0000 
US=0040 ES=0040 


26 


AX=4590 EX=0000 
DS=0040 ES=0040 


- 


INPUT COMMAND 


I <HEX4> 


CXx=0000 
$S=0040 


CX=0000 
$S=0040 


CX=0000 
SS=0040 


40-40 40 


0X=0000 


CS=0040 


DX=0000 
CS=0040 


DX=0000 
CS=0040 


40 40 40 


SP=0COO 


IP=0010 


SP=0CO0O 
IF=0000 


SF=0CO0O 
IF=0000 


typing the space bar. 


40 40 40 @e@2eCCeCeCREEEEEe 
kn 


BF=0000 SI=0000 [I=0000 
NV UF EI PL NZ AC FO NC 


EF=0000 SI=0000 [III=0000 
NV UP EI PL NZ AC PO NC 


KRP=0000 SI=0000 [II=0000 
NV UF EI FL NZ AC FE NC 


The Input command inputs a byte from the specified port 


and displays it. 


MOVE COMMAND 


M <RANGE> <ADDRESS> 


A 16-bit port address is allowed. 


The Move command moves the block of memory specified by 


<RANGE> to <ADDRESS>. 


performed without loss of data; 


Overlapping moves are always 


before it is overwritten. 


>M400 L10 420 
>D400 42F 

00400 54 45 53 
00410 FF FF FE 
00420 54 45 53 


>M404 40F 405 
>I400 L10 
00400 54 45 53 


=M405 410 404 
>D400L10 
00400 54 45 53 


49 4E 47 
FF FF FF 
49 4E 47 


49 49 4E 


49 4E 47 


FF-F7 FF 
FF-FE FF 
FF-F7 FF 


47-FF F7 


FF-F7 FF 


i.e., data is moved 


To do this, all moves from 
higher addresses to lower ones are done front-to-back, 
while moves from lower addresses to higher ones are 

done back-to-front. 


FF FF FS 


FF Fé FF 


FF FE FF TESTING swe eve ee 
FF FF FF Pee ee eee ea 
FF FE FF TESTING eWe eve es 


FF FF FE TESTIING «we evee” 


FF FE FF TESTING swe sevens 


Commands ; 


OUTPUT COMMAND 


O <HEX4> <BYTE> 


The Output command sends <BYTE> to the specified output 
port. A 16-bit port address is allowed. 


REGISTER COMMAND 


R 


R <REGISTER NAME> 


10 


With no parameters, the Register command dumps the 
register save area. 


Giving a register name as a parameter allows that 
register to be displayed and modified. The register 
name may be AX, BX, CX, DX, SP, BP, SI, DI, DS, ES, SS, 
CS, IP, PC, or F (upper case only); anything else will 
result in a "BR Error." IP and PC both refer to the 
Instruction Pointer and F refers to the Flag register. 
For all except the Flag register, the current 16-bit 
value will be printed in hex, then a colon will appear 
as a prompt for the replacement value. Typing 
<carriage return> leaves the register unchanged; 
otherwise type a <HEX4) to replace. 


The Flag register uses a system of two-letter mnemonics 
for each flag, as shown below: 


Flag Clear Set 

Overflow NV No Overflow OV Overflow 

Direction UP Up DN Down 
(Incrementing ) (Decrementing ) 

Interrupt DI Disabled EI Enabled 
Interrupts Interrupts 

Auxiliary NA No Auxiliary AC Auxiliary Carry 

Carry Carry 
Parity PO Parity Odd PE Parity Even 
Carry NC No Carry CY'.Carry 


Whenever the Flag register is displayed, all flags are 
displayed in this order. When the F register is 
specified with the R command, the flags are displayed 
and then the Monitor waits for any replacements to be 
made. Any number of two-letter flag codes may be 
typed, and only those flags entered willl be modified. 
If a flag has more than one code in the list a "DF 
Error" (Double Flag) will result. If any code is not 
recognized, a "BF Error" (Bad Flag) will occur. In 
either case, those flags up to the error have been 
changed, and those after the error have not. 


Commands 


After reset, all registers are set to zero except the 
segment registers, which are set to 40H, and the Stack 
Pointer, which is set to OCOOH. Flags are all cleared 
except for interrupts. Execution on a Trace or Go 
command would thus begin at 400H, which is the first 
location after the interrupt table. 


>R 

AX=0000 BX=0000 CX=0000 DX=0000 SP=0COO BP=0000 SI=0000 DI=0000 
DS=0040 ES=0040 SS=0040 CS=0040 IF=0000 NV UF EI PL NZ AC PE NC 
>R AX 

AX 0000 

$106 

>RCS 

CS 0040 


>RF 

NV UF EI FL NZ AC FE NC -ZR DN 

>R 

AX=0106 BX=0000 CX=0000 DX=0000 SF=0COO BF=0000 SI=0000 DI=0000 
DS=0040 ES=0040 $S=0040 CS=0040 IP=0000 NV DN EI FL ZR AC PE NC 
> 


SEARCH COMMAND 
S <RANGE> <LIST> 


The Search command searches <RANGE> for a byte or 
string of bytes specified by <LIST>. For each 
occurrence the first address of the match is displayed. 


‘$400 
00400 
00406 

. 0040C 
00412 
00418 
OO41E 


00424 

>D400 

00400 6C 70 OA OD 48 65-6C 70 OA OL 48 65 6C 70 Helr..Helr..Helr 
00410 48 65 6C 70 OA OD-48 65 6C 70 OA OD 48 65 + Help. Hele. He 
00420 OA OD 48 65 6C 70 lre..Helr 


> 


“~* 


ll 


Commands 


TRACE COMMAND 


T 


T <HEX4> 


12 


The Trace command traces the number of instructions 
specified (default = 1 instruction). After each 
instruction, the complete contents of the registers and 
flags are displayed. (For the meaning of the flag 
symbols, see Register command.) Since this command 
uses the hardware trace mode of the 8086, even ROM may 
be traced. 


“oR 
AX=0106 BX=0000 CX=0000 DX=0000 SF=0COO BF=0000 SI=0000 DI=0000 
IiS=0040 ES=0040 SS=0040 CS=0040 IP=0000 NV DN EI PL ZR AC PE NC 


a 


AX=0107 RBX=0000 CX=0000 DX=0000 SP=0C0O BP=0000 SI=0000 DI=0000 
DS=0040 ES=0040 SS=0040 CS=0040 IP=0001 NV DN EI PL NZ NA PO NC 
>T 


AX=0108 BX=0000 CX=0000 DX=0000 SF=0COO RBP=0000_ SI=0000 DI=0000 
[IS=0040 ES=0040 SS=0040 CS=0040 IP=0002 NV DN EI PL NZ NA PO NC 


>T4 
AX=0109 EX=0000 CX=0000 DX=0000 SP=0CO0O0 BF=0000 SI=0000 11=0000 
1S=0040 ES=0040 SS=0040 CS=0040 IP=0003 NV DN EI PL NZ NA FE NC 


AX=010A EX=0000 CX=0000 DIX=0000 SF=0COO BF=0000 SI=0000 D1I=0000 
DS=0040 ES=0040 SS=0040 CS=0040 IF=0004 NV DN EI PL NZ NA PE NC 


AX=010R BX=0000 CX=0000 DX=0000 SF=0COO BF=0000_ SI=0000 L'I=0000 
DS=0040 ES=0040 SS=0040 CS=0040 IP=0005 NV IN EI PL NZ NA PO NC 


AX=010C KX=0000 CX=0000 [IX=0000 SF=0CO00 RP=0000 SI=0000 [I=0000 
DS=0040 ES=0040 SS=0040 CS=0040 IF=0006 NV [IN EI PL NZ NA FE NC 


s 


8086 MONITOR ASSEMBLY LISTING 


0000 0001 
0000 0002 
0000 0003 
0000 0004 
0000 0005 
0000 0006 
0000 0007 
0000 0008 
0000 0009 
0000 0010 
0000 0011 
0000 0012 
0000 0013 
0000 0014 
0000 0015 
0000 0016 
0000 0017 
0000 0018 
0000 0019 
0000 0020 
0000 0021 
OFFO 0022 
OFFO EA 00 00 00 FF 0023 
OFFS 0024 
OFFS 0025 
OFFS 0026 
OFFS 0027 
OFFS OE 0C 0A 07 05 04 02 0028 
OFFC 0029 
OFFC 0030 
0100 0031 
0100 0032 
0100 0033 
0100 0034 
0100 0035 
0100 0036 
0100 0037 
0100 0038 
0100 0039 
0100 0040 
0100 0041 
0100 0042 
0100 0043 
0100 0044 
0100 0045 
0100 0046 
0100 0047 
0100 0048 
0100 0049 
0102 ' 0050 
0104 0051 
0118 0052 
0169 0053 
016A 0054 
019C 0055 
019C 0056 
019C¢ 0057 
019C 0058 
019C 0059 
019E 0060 
01A0 0061 
01A2 0062 
O1A4 0063 
01A6 0064 
01A8 0065 
01AA 0066 
01AC 0067 
01AE 0068 
01B0 0069 
01B0 0070 
01Be 0071 
01B4 0072 
01B6 0073 


; Rev 1.9 


Seattle Computer Products 8086 Monitor version 1.9 4-02-83 
for SCP Model 301A CPU Support Card 

by Tim Paterson 
Copyright 1982,83 by Seattle Computer Products, Inc. 
Revised 8-04-83 by Craig Deroven 


: Allow hard disk boot if sense switch # 3 is set. Also 
: allow lowercase letters for command to be accepted. 


; To select a disk boot, 
; to 1, the rest to 0. 


SCP: 
TARBELLDD: 


PUTBASE : EQU 
LOAD: EQU 
BOOTADDR EGU 


ORG 
PUT 
JMP 


EQU 
EQU 


100H 
200H 
80H 


OFFOH 


PUTBASE+$ 


0, OFFOOH 


;Baud Rate Table. 


;Entries for 9600, 4800, 2400, 


set one of the following equates 


;SCP DISK MASTER 
;Tarbell DD controller 


;Track 0, sector 1 read in here 
;Boot is block moved to this RAM address 


;Power-on jump to monitor 


1200, 300, 150, 110 baud 


0EH, OCH, 0AH, 07H, 05H, 04H, 02H 


;RAM area base address 


;CPU Support base port address 

;UART status port 

;UART data port 

;UART data available bit 

;UART transmitter ready bit 

;Maximum length of line input buffer 
;Maximum number of breakpoints 
;Length of breakpoint table 

s;Number of registers 

;-OFFOOOH (ROM address) 


;Number of breakpoints 
;Number of steps to trace 
;Breakpoint table 

j;Line input buffer 


;Working stack area 


;Stack set here so registers can be saved by pushing 


BAUD: DB 

ORG 100H 
;System Equates 
BASE: EQu OFOH 
STAT: EQU BASE+7 
DATA: EQU BASE+6 
DAV: EQU 2 
TBMT: EQU 1 
BUFLEN: EQU 80 
BPMAX: EQU 10 
BPLEN: EQU 2*BPMAX 
REGTABLEN: EQU 14 
SEGDIF: EQU 1000H 
PROMPT: EQU i 
CAN: EQU "@" 
;RAM area. 
BRKCNT: DS 2 
TCOUNT: DS 2 
BPTAB: DS BPLEN 
LINEBUF :DS BUFLEN+1 

ALIGN 

DS 50 
STACK: 
;Register save area 
AXSAVE: DS 2 
BXSAVE: DS 2 
CXSAVE: DS 2 
DXSAVE: DS 2 
SPSAVE: DS 2 
BPSAVE: DS 2 
SISAVE: DS 2 
DISAVE: DS 2 
DSSAVE: DS 2 
ESSAVE: DS 2 
RSTACK: 
SSSAVE: DS 2 
CSSAVE: DS 2 
IPSAVE: DS 2 
FSAVE: DS 2 


8086 Monitor Listing 


14 


41 
Fo 


c8 
05 


FB 


FA 
EF 


oc 


02 


07 
00 


FB 


00 


OF 
00 


00 
00 


0074 
0075 
0076 
0077 
0078 
0079 
0080 
0081 
0082 
0083 
0084 
0085 
0086 
0087 
0088 
0089 
0090 
0091 
0092 
0093 
0094 
0095 
0096 
0097 
0098 
0099 
0100 
0104 
0102 
0103 
0104 
0105 
0106 
0107 
0108 
0109 
0110 
0111 
0112 
0113 
0114 
0115 
0116 
0117 
0118 
0119 
0120 
0121 
0122 
0123 
0124 
0125 
0126 
0127 
0128 
0129 
0130 
0131 
0132 
0133 
0134 
0135 
0136 
0137 
0138 
0139 
0140 
0141 
0142 
0143 
O144 
0145 
0146 
0147 
0148 
0149 
0150 
0151 
0152 
0153 
0154 
0155 
0156 
0157 
0158 
0159 
0160 
0161 
0162 
0163 


REGSIZ EQU $-AXSAVE 
;Start of Monitor code 

ORG 

PUT PUTBASE+$ 
;One-time initialization 

uP 

XOR AX, AX 

MOV SS, AX 

MOV OS , AX 

MOV ES, Ax 

MOV SP, STACK 

MOV D1, AXSAVE 

MOV CX,REGSIZ/2-1 

REP 

STOSW 

MOV AH,2 

STOSsW ;Enable user interrupts 

MOV B,CSPSAVE+13,16 ;Set user SP to 1000H 
;Prepare 9513 

MOV AL ,17H 

OUT BASE+5 ;Select Master Mode register 
sInitialize loop. Ports BASE through BASE+11 are initialized 
ifrom table. Each table entry has number of bytes followed by 
idata. 

MOV S1, INITTABLE Initialization table 

MOV DX, BASE ;DX has (variable) port no. 
INITPORT: 

SEG cs 

LODSB ;Get byte count 

MOV CL,AL 

JCXZ NEXTPORT sNo init. for some ports 
INITBYTE: 

SEG cs 

LODSB ;Get init. data 

OUT Dx ;Send to port 

LOOP INITBYTE s;As many bytes as required 
NEXTPORT 

8)4 ;Prepare for next port 

CMP DL,BASE+11 ;Check against limit 

JBE INITPORT 
sInitialization complete except for determining baud rate. 
;Both 8259As are ready to accept interrupts, the 8251A is set for 
316X clock and two stop bits. 

IN BASE+15 ;Read sense switches 

AND AL , 18H ;Mask to baud rate selection bits 

JZ AUTOBAUD s1f none selected, do auto baud rate 

CMP AL,8 319.2K baud selected? 

JZ MONITOR s1f so, we're all set 

TEST AL,8 5300 or 9600 selected? 

MOV AL, OEH ;Ready to select 9600 baud 

JZ NEWBAUD 39600 baud if bit 3 is zero 

MOV AL,5 ;Go for 300 baud 
NEWBAUD : 

OUT BASE+10 

JMPS MONITOR 
AUTOBAUD : 

CALL CHECKB ;Check for correct baud rate 
;CHECKB does not return if baud rate is correct 
;lnitial baud rate (19.2k) was wrong, so run auto-baud routine 

MOV S1,BAUD 
CHECKLOOP : 

CALL NEXTB ;Check if baud rate correct 

JMPS CHECKLOOP ;Try next rate if not 
NEXTB: 

SEG cs 

LODSB ;Get new baud rate 

OUT BASE +10 i;Send to baud rate generator 
CHECKB: 

CALL CHECKB2 
CHECKB2: 

CALL IN ;Get carriage return 

CMP AL,13 ;Correct? 

JZ MONITOR ;Don't return if correct 

RET 
Initialization complete, including baud rate. 
MONITOR: 
; Do auto boot if sense switch 0 is on. 
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00 
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;AL=first non-blank character 


In BX we can address with it 


j;Next empty buffer location 


;Check for control characters 


;Drop in to backspace if full 


;Can’t backspace over nothing 


;Ilgnore all other control char. 
ret. in buffer 
;Set up DI for command processing 


MOV DI,LINEBUF 
MOV B,CD13,13 j;No breakpoints after boot 
IN BASE+0FH Sense switch port 
TEST AL,1 
JZ DOMON 
JMP BOOT 
DOMON : 
MOV SI,HEADER 
CALL PRINTMES 
COMMAND : 
;Re-establish initial conditions 
UP 
XOR AX, AX 
MOV DS , AX 
MOV ES ,AX 
MOV SP ,STACK 
MOV C64HI, INT ;Set UART interrupt vector 
MOV C66HI,CS 
MOV AL , PROMPT 
CALL OUT 
CALL INBUF 3;Get command line 
;From now and throughout command line processing, DI points 
;to next character in command line to be processed. 
CALL SCANB ;Scan off leading blanks 
JZ COMMAND 3Null command? 
MOV AL,CO13 
AND AL, ODFH ;Convert lower case 
;Prepare command letter for table lookup 
SUB Pl - jLow end range check 
JC ERR1 
CMP AL,"T"+1-"B* ;Upper end range check 
JNC ERR1 
INC DI 
SHL AL j;Times two 
CBW sNow a 16-bit quantity 
XCHG BX, AX 
SEG cs 
CALL CBX+COMTABI ;Execute command 
JMPS COMMAND ;Get next command 
ERR1: JMP ERROR 
;Get input line 
INBUF : 
MOV D1,LINEBUF 
XOR CX ,CX ;Character count 
GETCH: 
CALL IN ;Get input character 
CMP AL, 20H 
Jc CONTROL 
CMP AL ,7FH ;RUBOUT is a backspace 
JZ BACKSP 
CALL OUT ;Echo character 
CMP AL ,CAN ;Cancel line? 
JZ KILL 
STOSB ;Put in input buffer 
INC CX ;Bump character count 
CMP. CX, BUFLEN iBuffer full? 
JBE GETCH 
BACKSP: 
JCXZ. GETCH 
DEC DI ;Drop pointer 
DEC CX sand character count 
CALL BACKUP ;Send physical backspace 
JMPS GETCH ;Get next char. 
CONTROL : 
CMP AL,8 ;Check for backspace 
JZ BACKSP. 
CMP AL, 13 ;Check for carriage return 
JNZ GETCH 
STOSB ;Put the car. 
MOV D1,LINEBUF 
;Output CR/LF sequence 
CRLF: 
MOV AL, 13 
CALL OUT 
MOV AL, 10 
JMPS OUT 
;Cancel input line 
KILL: 
CALL CRLF 
JMPS COMMAND 
;Character input routine 
IN: 


is 
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00F9 
OOFA 
OOFC 
OOFE 
0100 
0102 
0104 
0105 
0106 
0106 
0106 
0106 
0106 
0109 
0109 
0109 
0109 
0109 
010A 
010B 
010E 
0110 
0112 
0113 
0113 
0113 
0113 
0113 
0116 
0119 
011B 
011c 
011C 
011C 
011C 
011C 
011E 
011F 
0124 
0122 
0123 
0124 
0125 
0125 
0128 
0129 
0129 
0129 
0129 
0129 
012B 
012D 
0130 
0132 
0134 
0134 
0134 
0134 
0134 
0134 
0136 
0138 
013B 
013D 
013D 
013D 
0140 
0143 
0143 
0143 
0143 
0143 
0145 
0148 
0144 
014A 
0144 
0144 
014A 
014C 
014C 
014D 
O14F 
0151 
0152 
0152 
0155 
0155 
0157 
0157 
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85 


20 
FF 


30 


07 


00 


oD 


00 


00 


00 
00 


00 


00 


0254 
0255 
0256 
0257 
0258 
0259 
0260 
0261 
0262 
0263 
0264 
0265 
0266 
0267 
0268 
0269 
0270 
0271 
0272 
0273 
0274 
0275 
0276 
0277 
0278 
0279 
0280 
0281 
0282 
0283 
0284 
0285 
0286 
0287 
0288 
0289 
0290 
0291 
0292 
0293 
0294 
0295 
0296 
0297 
0298 
0299 
0300 
0301 
0302 
0303 
0304 
0305 
0306 
0307 
0308 
0309 
0310 
0311 
0312 
0313 
0314 
0315 
0316 
0317 
0318 
0319 
0320 
0321 
0322 
0323 
0324 
0325 
0326 
0327 
0328 
0329 
0330 
0331 
0332 
0333 
0334 
0335 
0336 
0337 
0338 
0339 
0340 
0344 
0342 
0343 


DI 3;Poll, don’t interrupt 
INB STAT 
TEST AL ,DAV 
JZ IN j;Loop until ready 
INB DATA 
AND AL, 7FH ;Only 7 bits 
EI ;Interrupts OK now 
RET 
iPhysical backspace - blank, backspace, blank 
BACKUP : 
MOV S1,BACMES 
;Print ASCII message. Last char has bit 7 set 
PRINTMES: 
SEG cs 
LODSB ;Get char to print 
CALL OUT 
SHL AL sHigh bit set? 
JNC PRINTMES 
RET 
;Scan for parameters of a command 
SCANP : 
CALL SCANB ;Get first non-blank 
CMP B,CDII,"," ;One comma between params OK 
JNE EOLCHK i1f not comma, we found param 
INC DI i;Skip over comma 
;Scan command line for next non-blank character 
SCANB : 
MOV Aus" © 
PUSH CX ;Don’t disturb CX 
MOV CL,-1 j;but scan as many as necessary 
REPE 
SCASB 
DEC D1 ;Back up to first non-blank 
POP Cx 
EOLCHK: 
CMP B,CD13,13 
RET 
;Print the 5-digit hex address of Sl and DS 
OUTSI: 
Dx ,DS ;Put DS where we can work with it 
MOV AH,0 ;Will become high bits of DS 
CALL SHIFT4 ;Shift DS four bits 
ADD Dx,SI ;Compute absolute address 
JMPS OUTADD iFinish below 
;Print 5-digit hex address of DI and ES 
;Same as OUTSI above 
OUTDI: 
MOV DX,ES 
MOV AH,0 
CALL SHIFT4 
ADD... _-DX,DI 
;Finish OUTSI here too 
OUTADD: 
ADC AH,0 ;Add in carry to high bits 
CALL HIDIG ;Output hex value in AH 
j;Print out 16-bit valve in DX in hex 
OUT 16: 
AL. ,DH sHigh-order byte first 
CALL HEX 
MOV AL ,OL ;Then low-order byte 
;Output byte in AL as two hex digits 
HEX: 
MOV AH, AL ;Save for second digit 
;Shift high digit into low 4 bits 
CX 
MOV CL,4 
SHR AL,CL 
POP CX 
CALL D1G1T ;Output first digit 
HIDIG: 
MOV AL, AH s;Now do digit saved in AH 
DIGIT: 
AND AL , OFH ;Mask to 4 bits 


0159 
0159 
015B 
015C 
015 
015F 
015F 
015F 
015F 
015F 
0160 
0160 
0162 
0164 
0166 
0167 
0169 
016A 
016A 
016A 
016A 
016A 
016C 
016E 
016E 
016E 
016E 
016E 
0171 
0173 
0174 
0174 
0174 
0174 
0174 
0174 
0176 
0178 
017A 
017C 
017E 
0180 
0182 
0184 
0186 
0188 
018A 
018C 
018E 
0190 
0192 
0194 
0196 
0198 
019A 
019A 
019A 
019A 
019A 
019A 
019A 
019¢ 
019E 
01A1 
01A3 
01A5 
01A7 
01A8 
01A8 
01A8 
01A8 
01A8 
01AA 
01AC 
01AE 
01B0 
01B2 
01B4 
01B6 
01B8 
01B9 
01B9 
01B9 
01B9 
01B9 
01B9 
01B9 
01B9 
01B9 
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0344 ;Trick 6-byte hex conversion works on 8086 too. 

0345 ADD AL ,90H 

0346 DAA 

0347 ADC AL, 40H 

0348 DAA 

0349 

0350 ;Console output of character in AL 

0351 

0352 OUT: 

0353 PUSH AX iCharacter to output on stack 
0354 OUT1: 

0355 INB STAT 

0356 AND AL , TBMT 

0357 JZ OUT sWait until ready 

0358 PoP AX 

0359 OUTB DATA 

0360 RET 

0361 

0362 ;Output one space 

0363 

0364 BLANK: 

0365 MOV AL," § 

0366 JMPS OUT 

0367 

0368 ;Output the number of blanks in CX 

0369 

0370 TAB: 

0371 CALL BLANK 

0372 LOOP TAB 

0373 RET 

0374 

0375 ;Command Table. Command letter indexes into table to get 
0376 ;address of command. PERR prints error for no such command. 
0377 

0378 COMTAB: 

0379 Ow BOOT 3B 

0380 OW PERR iC 

0381 Ow DUMP sD 

0382 Ow ENTER sE 

0383 Dw FILL iF 

0384 Ow GO iG 

0385 DW PERR 3H 

0386 OW INPUT 1 

0387 DW PERR iv 

0388 DW PERR iK 

0389 Dw PERR iL 

0390 OW MOVE iM 

0391 Dw PERR iN 

0392 Ow OUTPUT 50 

0393 Dw PERR sP 

0394 Ow PERR iQ 

0395 OW REG iR 

0396 OW SEARCH iS 

0397 Ow TRACE iT 

0398 

0399 ;Given 20-bit address in AH:DX, breaks it down toa segment 
0400 ;number in AX and a displacement in DX. Displacement is 
0401 ;always zero except for least significant 4 bits. 

0402 

0403 GETSEG: 

0404 MOV AL,DL 

0405 AND AL , OFH ;AL has least significant 4 bits 
0406 CALL SHIFT4 i4-bit left shift of AH:DX 
0407 MOV DL, AL j;Restore lowest 4 bits 
0408 MOV AL ,DH jLow byte of segment number 
0409 XOR DH,DH ;Zero high byte of displacement 
0410 RET 

0411 

0412 ;Shift AH:DX left 4 bits 

0413 

0414 SHIFT4: 

0415 SHL DX 

0416 RCL AH 31 

0417 SHL DX 

0418 RCL AH 32 

0419 SHL Dx 

0420 RCL AH 13 

0421 SHL DX 

0422 RCL. AH i+ 

0423 RET2: RET 

0424 

0425 ;RANGE - Looks for parameters defining an address range. 
0426 ;The. first parameter is a hex number of 5 or less digits 
0427 ;which specifies the starting address. The second parameter 
0428 ;may specify the ending address, or it may be preceded by 
0429 ;"L" and specify a length (4 digits max], or it may be 
0430 ;omitted and a length of 128 bytes is assumed. Returns with 
0431 ;segment no. in AX and displacement (0-F) in DX. 

0432 
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01B9 
01B9 
01BC 
01BF 
01C0 
01c1 
01C4 
01C7 
01c9 
01CC 
01CE 
01D1 
01D4 
01D6 
01D9 
01DC 
01DE 
01DF 
01E0 
01E2 
01E4 
01E6 
01E7 
01E8 
O01EA 
O01EA 
01EB 
O1EE 
O1F1 
O1F 1 
01F3 
O1F4 
O1FS 
01F5 
O1F5 
O1F5 
01FS 
01FS 
O1FS 
O1FS 
01F7 
01FB 
01FD 
O1FF 
02014 
0201 
0201 
0201 
0201 
0201 
0203 
0203 
0206 
0209 
0209 
0209 
0209 
0209 
020C 
0200 
0210 
0211 
0213 
0213 
0216 
0217 
0217 
021A 
021A 
021B 
021E 
021F 
0220 
0222 
0224 
0226 
0228 
0229 
022B 
022D 
022F 
0232 
0234 
0234 
0237 
0239 
0239 
023A 
023C 
023E 
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47 
03 


FF 


01 


FF 


FF 


FF 


FF 


00 


0433 
0434 
0435 
0436 
0437 
0438 
0439 
0440 
0444 
0442 
0443, 
O44 
0445 
O446 
0447 
0448 
0449 
0450 
0451 
0452 
0453 
0454 
0455 
0456 
0457 
0458 
0459 
0460 
0461 
0462 
0463 
0464 
0465 
0466 
0467 
0468 
0469 
0470 
0471 
0472 
0473 
0474 
0475 
0476 
0477 
0478 
0479 
0480 
0481 
0482 
0483 
0484 
0485 
0486 
0487 
0488 
0489 
0490 
0491 
0492 
0493 
0494 
0495 
0496 
0497 
0498 
0499 
0500 
0501 
0502 
0503 
0504 
0505 
0506 
0507 
0508 
0509 
0510 
0511 
0512 
0513 
0514 
0515 
0516 
0517 
0518 
0519 
0520 
0521 
0522 


RANGE : 

MOV cx,5 35 digits max 

CALL GETHEX ;Get hex number 

PUSH AX ;Save high 4 bits 

PUSH Dx ;Save low 16 bits 

CALL SCANP ;Get to next parameter 

CMP B,CD1I,"L" ;Length indicator? 

JE GETLEN 

CMP B,CD13,"1" 

JE GETLEN 

MOV DX, 128 ;Default length 

CALL HEXIN ;Second parameter present? 

Jc RNGRET ;1f not, use default 

MOV cx,5 35 hex digits 

CALL GETHEX ;Get ending address 

MOV Cx ,DX jLow 16 bits of ending addr. 

POP Dx jLow 16 bits of starting addr. 

POP Bx ;BH=hi 4 bits of start addr. 

SUB cx ,DX ;Compute range 

SBB AH,BH ;Finish 20-bit subtract 

JNZ RNGERR ;Range must be less than 64K 

XCHG AX, BX ;AH=starting, BH=ending hi 4 bits 

INC CX ;Range must include ending location 

JMPS RNGCHK ;Finish range testing and return 
GETLEN: 

INC DI ;Skip over “L" to length 

MOV CX,4 j;Length may have 4 digits 

CALL GETHEX ;Get the range 
RNGRET: 

MOV Cx ,DX ;Length 

POP DX jLow 16 bits of starting addr. 

POP AX ;AH=hi 4 bits of starting addr. 
;RNGCHK verifies that the range lies entirely within one segment. 
;CX=0 means count=10000H. Range is within one segment only if 
jadding the low 4 bits of the starting address to the count is 
;¢=10000H, because segments can start only on 16-byte boundaries. 
RNGCHK : 

MOV Bx ,DX jLow 16 bits of start addr. 

AND BX, OFH jLow 4 bits of starting addr. 

JCXZ MAXRNG ;1f count=10000H then BX must be 0 

ADD BX ,CX sMust be ¢=10000H 

JNC GETSEG ;OK if strictly < 
MAXRNG : 
;1f here because of JCXZ MAXRNG, we are testing if low 4 bits 
;(in BX) are zero. If we dropped straight in, we are testing 
;for BX+CX=10000H (=0). Either way, zero flag set means 
jwithing range. 

JZ GETSEG 
RNGERR : 

MOV AX ,4700H+"R" ;RG ERROR 

JMP ERR 
;Dump an area of memory in both hex and ASCII 
DUMP : 

CALL RANGE ;Get range to dump 

PUSH AX ;Save segment 

CALL GETEOL ;Check for errors 

POP DS ;Set segment 

MOV S1,DXxX 3S1 has displacement in segment 
ROW: 

CALL OUTSI ;Print address at start of line 

PUSH Sl ;Save address for ASCII dump 
BYTE: 

CALL BLANK ;Space between bytes 
BYTE1: 

LODSB ;Get byte to dump 

CALL HEX jand display it 

POP Dx ;DX has start addr. for ASCII dump 

DEC CX ;Drop loop count 

JZ ASCI1 ;1f through do ASCII dump 

MOV AX,S1 

TEST AL , OFH ;On 16-byte boundary? 

JZ ENDROW 

PUSH DX ;Didn’t need ASCII addr. yet 

TEST AL,7 ;O0n 8-byte boundary? 

JNZ BYTE 

MOV AL, *-* ;Mark every 8 bytes 

CALL OUT 

JMPS BYTE1 
ENDROW : 

CALL ASCI1 ;Show it in ASCI1 

JMPS ROW ;Loop until count is zero 
ASCII: 

PUSH CX ;Save byte count 

MOV AX,S1 ;Current dump address 

MOV S1,DX ;ASCI1 dump address 

SUB AX ,DX ;AX=length of ASCI11 dump 
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0523 
0524 
0525 
0526 
0527 
0528 
0529 
0530 
0531 
0532 
0533 
0534 
0535 
0536 
0537 
0538 
0539 
0540 
0541 
0542 
0543 
0544 
0545 
0546 
0547 
0548 
0549 
0550 
0551 
0552 
0553 
0554 
0555 
0556 
0557 
osss 
0559 
0560 
0561 
0562 
0563 
0564 
0565 
0566 
0567 
0568 
0569 
0570 
0571 
0572 
0573 
OS74 
0575 
0576 
0577 
0578 
0579 
0580 
0581 
0582 
0583 
0584 
0585 
0586 
0587 
0588 
0589 
0590 
0591 
0592 
0593 
0594 
0595 
0596 
0597 
0598 
0599 
0600 
0601 
0602 
0603 
0604 
0605 
0606 
0607 
0608 
0609 
0610 
0611 
0612 
0613 
0614 
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;Compute tab length. ASCI1 dump always appears on right side 
;screen regardless of how many bytes were dumped. Figure 3 
;characters for each byte dumped and subtract from 51, which 
;allows a minimum of 3 blanks after the last byte dumped. 

MOV BX, AX 

SHL AX jLength times 2 

ADD AX, BX jLength times 3 

MOV CX,51 

SUB CX , AX sAmount to tab in CX 

CALL TAB 

MOV CX ,BX sASCII dump length back in CX 
ASCDMP : 

LODSB ;Get ASCII byte to dump 

AND AL,7FH ;ASCI1 uses 7 bits 

CMP AL , 7FH ;Don’t try to print RUBOUT 

JZ NOPRT 

CMP wee ;Check for control characters 

JNC PRIN 
NOPRT : 

MOV os i;1f unprintable character 
PRIN: 

CALL OUT ;Print ASCII character 

LOOP ASCDMP ;CX times 

POP cx ;Restore overall dump length 

JMP CRLF ;Print CR/LF and return 
;Block move one area of memory to another. Overlapping moves 
sare performed correctly, i.e., so that a source byte is not 
overwritten until after it has been moved. 
MOVE: 

CALL RANGE ;Get range of source area 

PUSH cx ;Save length 

PUSH AX ;Save segment 

MOV S1,DX ;Set source displacement 

MOV CX,5 sAllow 5 digits 

CALL GETHEX sin destination address 

CALL GETEOL isCheck for errors 

CALL GETSEG ;Convert dest. to seg/disp 

MOV D1,DxX sSet dest. displacement 

POP Bx ;Source segment 

MOV DS , BX 

MOV ES,AX ;Destination segment 

PoP Cx Length 

CMP DI,SI ;Check direction of move 

SBB AX, BX ;Extend the CMP to 32 bits 

JB COPYLIST i;Move forward into lower mem. 
;Otherwise, move backward. Figure end of source and destination 
sareas and flip direction flag. 

DEC CX 

ADD S1,CX ;End of source area 

ADD D1,CX ;End of destination area 

DOWN ;Reverse direction 

INC Cx 
COPYLIST: 

MOovS ;Do at least 1 - Range is 1-10000H not 0-FFFFH 

DEC Cx 

REP 

MOVSB ;Block move 

RET 
;Fill an area of memory with a list values. If the list 
;is bigger than the area, don’t use the whole list. If the 
;list is smaller, repeat it as many times as necessary. 
FILL: 

CALL RANGE ;Get range to fill 

PUSH Cx ;Save length 

PUSH AX ;Save segment number 

PUSH DX ;Save displacement 

CALL LIST ;Get list of values to fill with 

POP DI ;Displacement in segment 

POP ES ;Segment 

PoP Cx j;Length 

CMP BX ,CX ;BX is length of fill list 

MOV S1,LINEBUF j;List is in line buffer 

JCXZ BIGRNG 

JAE COPYL1IST i1f list is big, copy part of it 
BIGRNG: 

SUB CX , BX ;How much bigger is area than list? 

XCHG CX, BX ;CX=length of list 

PUSH DI ;Save starting addr. of area 

REP 

MOVSB ;Move list into area 

POP SI 
;The list has been copied into the beginning of the 
;specified area of memory. SI is the first address 
;of that area, DI is the end of the copy of the list 
;plus one, which is where the list will begin to repeat. 
;All we need to do now is copy CS1J to CDII until the 
;end of the memory area is reached. This will cause the 
;list to repeat as many times as necessary. 
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j;Length of area minus list 
;Different index register 
;requires different segment reg. 
;Do the block move 


;Search a specified area of memory for given list of bytes. 


each match. 


;Get area to be searched 
;Save count 

;Save segment number 

;Save displacement 

;Get search list 

;No. of bytes in list-1 
;Displacement within segment 
;Segment 

;Length to be searched 

; minus length of list 


;List kept in line buffer 
;Bring first byte into AL 


;Search for first byte 

;Do at least once by using LOOP 
;Exit if not found 

sLength of list minus 1 


;Will resume search here 


;Compare rest of string 
;Area length back in CX 
;Next search location 
;Restore list lengtt 
;Continue search if no match 
;Match address 

;Print it 

;Restore search address 


sLook for next occurrence 
the number may have. 


;Scan to next parameter 
;Initialize the number 


;Get a hex digit 
;Must be one valid digit 
;First 4 bits in position 


;Next char in buffer 

;Digit count 

;Get another hex digit? 
;All done if no more digits 
;Too many digits? 

;Multiply by 16 

j;and combine new digit 

;Get more digits 


input buffer is a hex digit 
is. Carry set if not. 


;Convert lower case 


;Check if AL has a hex digit and convert it to binary if it 


;Kill ASC11 numeric bias 


;OK if 0-9 
;Convert lower case 
;Kill A-F bias 


0615 MOV CX , BX 
0616 PUSH ES 

0617 POP DS 

0618 JMPS COPYLIST 
0619 

0620 

0621 ;Print address of first byte of 
0622 

0623 SEARCH: 

0624 CALL RANGE 
0625 PUSH Cx 

0626 PUSH AX 

0627 PUSH DX 

0628 CALL LIST 
0629 DEC BX 

0630 PoP DI 

0631 POP ES 

0632 POP Cx 

0633 SUB CX ,BX 
0634 SCAN: 

0635 MOV S1,LINEBUF 
0636 LODSB 

0637 DOSCAN: 

0638 SCASB 

0639 LOOPNE DOSCAN 
0640 JNZ RET 
0641 PUSH BX 

0642 XCHG BX, CX 
0643 PUSH D1 

0644 REPE 

0645 CMPSB 

0646 MOV CX, BX 
0647 POP DI 

0648 POP BX 

0649 JNZ TEST 
0650 DEC DI 

0651 CALL OUTDI 
0652 INC D1 

0653 CALL CRLF 
0654 TEST: 

0655 JCXZ RET 
0656 JMPS SCAN 
0657 

0658 ;Get the next parameter, which must be a hex number. 
0659 ;CX is maximum number of digits 
0660 

0661 GETHEX: 

0662 CALL SCANP 
0663 GETHEX1: 

0664 XOR DX ,DX 
0665 MOV AH ,DH 
0666 CALL HEXIN 
0667 JC ERROR 
0668 MOV DL, AL 
0669 GETLP: 

0670 INC Dl 

0671 DEC CX 

0672 CALL HEXI1N 
0673 JC RET 
0674 JCXZ ERROR 
0675 CALL SHIFT4 
0676 OR DL, AL 
0677 JMPS GETLP 
0678 

0679 ;Check if next character in the 
0680 ;and convert it to binary if it 
0681 

0682 HEXIN: 

0683 MOV AL,CDII3 
0684 cMP AL,‘A’ 
0685 JB HEXCHK 
0686 AND AL , ODFH 
0687 

0688 

0689 ;is. Carry set if not. 
0690 

0691 HEXCHK: 

0692 SUB AL,"0" 
0693 Jc RET 
0694 cMP AL, 10 
0695 CMC 

0696 JNC RET 
0697 AND AL, ODFH 
0698 SUB AL,7 
0699 CMP AL, 10 
0700 Jc RET 
0701 CMP AL, 16 
0702 CMC 

0703 RET: RET 
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0321 
0321 
0321 
0321 
0321 
0321 
0324 
0327 
0329 
032C 
032F 
0331 
0332 
0333 
0334 
0334 
0336 
0338 
033A 
033C 
033E 
033F 
0340 
0340 
0342 
0343 
0343 
0345 
0346 
0348 


O34A ¢ 


034C 
O34E 
0350 
0352 
0353 
0353 
0355 
0356 
0358 
0358 
0358 
0358 
0358 
0358 
0358 
035B 
0358 
035E 
0360 
0364 
0366 
0366 
0366 
0366 
0366 
0366 
0366 
0369 
036B 
036C 
036C 
036C 
036C 
036C 
036C 
036C 
036D 
036D 
036D 
036D 
036D 
036D 
036D 
036D 
0371 
0373 
0376 
0379 
0379 
0379 
0379 
0379 
037C 
037F 
037F 
O37F 
037F 
037F 


E8 
75 


B3 
02 


c3 


4F 


81 
8B 
E8 
BE 


E8 
E9 


8D 
FD 


04 
FF 
18 


FD 


17 


FD 
07 


FD 
Fc 


o1 


01 


0704 
0705 
0706 
0707 
0708 
0709 
0710 
0711 
0712 
0713 
0714 
0715 
0716 
0717 
0718 
0719 
0720 
0721 
0722 
0723 
0724 
0725 
0726 
0727 
0728 
0729 
0730 
0731 
0732 
0733 
0734 
0735 
0736 
0737 
0738 
0739 
0740 
0741 
0742 
0743 
0744 
0745 
0746 
0747 
0748 
0749 
0750 
0751 
0752 
0753 
0754 
0755 
0756 
0757 
0758 
0759 
0760 
0761 
0762 
0763 
0764 
0765 
0766 
0767 
0768 
0769 
0770 
0771 
0772 
0773 
O774 
0775 
0776 
0777 
0778 
0779 
0780 
0781 
0782 
0783 
0784 
0785 
0786 
0787 
0788 
0789 
0790 
0791 
0792 


8086 Monitor 


;required. Carry set if parameter bad. Called by LIST 


;Scan to parameter 

sls it in hex? 

;1f not, could be a string 
;Only 2 hex digits for bytes 
1Get the byte valve 

3Add to list 


;Parameter was OK 

;Get first character of param 
;String? 

;Either quote is all right 


;Not string, not hex - bad 


;Save for closing quote 


j;Next char of string 


;Check for end of line 
;Must find a close quote 
;Check for close quote 
sAdd new character to list 
;Two quotes in a row? 

i1f not, we're done 

;Yes - skip second one 


;Put new char in list 


;Get more characters 


;Get a byte list for ENTER, FILL or SEARCH. Accepts any number 
;0f 2-digit hex values or character strings in either single 


;Put byte list in the line buffer 


;Process a parameter 

;1f OK, try for more 

;BX now has no. of bytes in list 
sList must not be empty 


;Make sure there is nothing more on the line except for 


If there is, it is an 


;Skip blanks 
;Better be a RETURN 


;Command error. DI has been incremented beyond the 


;Syntax error. DI points to character in the input buffer 
;which caused error. By subtracting from start of buffer, 
;we will know how far to tab over to appear directly below 


;How many char processed so far? 
;Parameter for TAB in CX 
;Directly below bad char 

;Error message 


;Print error message and abort to command level 


;Short form of ENTER command. A list of values from the 
;command line are put into memory without using normal 


;Process one parameter when a list of bytes is 
LISTITEM: 

CALL SCANP 

CALL HEXIN 

JC STRINGCHK 

MOV Cx,2 

CALL GETHEX 

MOV CBxI,DL 

INC BX 
GRET: cLc 

RET 
STRINGCHK: 

MOV AL,CO13 

CMP a pigs 

JZ STRING 

CMP ete 

JZ STRING 

STC 

RET 
STRING: 

MOV AH, AL 

INC D1 
STRNGLP: 

MOV AL,CDII 

INC Dl 

CMP AL ,13 

JZ ERROR 

CMP AL ,AH 

JNZ STOSTRG 

CMP AH,CDII 

JNZ GRET 

INC DI 
STOSTRG: 

MOV CBX, AL 

INC Bx 

JMPS STRNGLP 
3(’) ox double (") quotes. 
LIST: 

MOV BX, LINEBUF 
LISTLP: 

CALL LISTITEM 

JNC LISTLP 

SUB BX, LINEBUF 

JZ ERROR 
sblanks and carriage return. 
;unrecognized parameter and an error. 
GETEOL: 

CALL SCANB 

JNZ ERROR 

RET 
;command letter so it must decremented for the 
;error pointer to work. 
PERR: 

DEC DI 
sit on the terminal. Then print "* Error". 
ERROR: 

SUB D1,LINEBUF-1 

MOV Cx,D1 

CALL TAB 

MOV S1,SYNERR 
PRINT: 

CALL PRINTMES 

JMP COMMAND 
;ENTER mode. 
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037F 0793 GETLIST: 

037F E8 Dé FF 0794 CALL LIST ;Get the bytes to enter 
0382 SF 0795 POP DI ;Displacement within segment 
0383 07 0796 POP ES ;Segment to enter into 

0384 BE 18 01 0797 MOV S1,LINEBUF ;List of bytes is in line buffer 
0387 8B CB 0798 MOV CX, BX ;Count of bytes 

0389 F3 0799 REP 

038A A+ 0800 MOVSB ;Enter that byte list 

038B C3 0801 RET 

038C 0802 

038C 0803 ;Enter values into memory at a specified address. lf the 
038C 0804 ;line contains nothing but the address we go into “enter 
038C 0805 ;mode", where the address and its current valve are printed 
038C 0806 ;and the user may change it if desired. To change, type in 
038C 0807 ;new value in hex. Backspace works to correct errors. If 
038C 0808 ;an illegal hex digit or too many digits are typed, the 
038C 0809 ;bell is sounded but it is otherwise ignored. To go to the 
038C 0810 ;next byte (with or without change], hit space bar. To 

038C 0811 ;back up to a previous address, type "-". On 

038C 0812 ;every 8-byte boundary a new line is started and the address 
038C 0813 ;is printed. To terminate command, type carriage return. 
038C 0814 ; Alternatively, the list of bytes to be entered may be 
038C 0815 ;included on the original command line immediately following 
038C 0816 ;the address. This is in regular LIST format so any number 
038C 0817 ;of hex values or strings in quotes may be entered. 

038C 0818 

038C 0819 ENTER: 

038C BY 05 00 0820 MOV cx,5 35 digits in address 

038F E8 54 FF 0821 CALL GETHEX ;Get ENTER address 

0392 E8 05 FE 0822 CALL GETSEG ;Convert to seg/disp format 
0395 0823 ;Adjust segment and displacement so we are in the middle 
0395 0824 ;of the segment instead of the very bottom. This allows 
0395 0825 ;backing up a long way. 

0395 82 EC 08 0826 SUB AH,8& ;Adjust segment 32K down 
0398 80 Cé 80 0827 ADD DH, 89H ; and displacement 32K up 
039B 50 0828 PUSH AX ;Save for later 

039C 52 0829 PUSH DX 

039D E8 7C FD 0830 CALL SCANB ;Any more parameters? 

03A0 75 DD 0831 JNZ GETLIST i;1f not end-of-line get list 
03A2 SF 0832 POP DI ;Displacement of ENTER 

03A3 07 0833 POP ES ;Segment 

03A4 0834 GETROW: 

03A4 E8 8D FD 0835 CALL OUTDI ;Print address of entry 
03A7 E8 CO FD 0836 CALL BLANK j;Leave a space 

O03AA 0837 GETBYTE: 

O3AA 26 0838 SEG ES 

03AB 8A 05 0839 MOV AL,CDII ;Get current valve 

03AD E8 9A FD 0840 CALL HEX ;And display it 

03B0 BO 2E 0841 MOV AL,".* 

03B2 E8 AA FD 0842 CALL. OUT ;Prompt for new valve 

03B5 BY 02 00 0843 MOV Cx,2 ;Max of 2 digits in new value 
03B8 BA 00 00 0844 MOV Dx,0 ;Intial new value 

03BB 0845 GETDIG: 

03BB E8 3B FD 0846 CALL IN ;Get digit from user 

O3BE 8A E0 0847 MOV AH, AL ;Save 

03C0 E8 49 FF 0848 CALL HEXCHK sHex digit? 

03C3 86 E0 0849 XCHG AH, AL ;Need original for echo 
03C5 72 0C 0850 JC NOHEX s1f not, try special command 
03C7 E8 95 FD 0851 CALL OUT ;Echo to console 

03CA 8A Fe 0852 MOV DH,DL yRotate new valve 

03CC 8A D4 0853 MOV DL,AH jAnd include new digit 

03CE E2 EB 0854 LOOP GETDIG ;At most 2 digits 

03D0 0855 ;We have two digits, so all we will accept now is a command. 
03D0 0856 WAIT: 

03D0 E8 26 FD 0857 CALL IN ;Get command character 

03D3 0858 NOHEX: 

03D3 3C 08 0859 CMP AL,8& ;Backspace 

03D5 74 19 0860 JZ BS 

03D7 3C 7F 0861 CMP AL ,7FH ; RUBOUT 

03D9 74 15 0862 JZ BS 

03DB 3C 2D 0863 CMP AL "=" ;Back up to previous address 
03DD 74 4D 0864 JZ PREV 

03DF 3C 0D 0865 CMP AL, 13 ;All done with command? 
03E1 74 OF 0866 JZ EOL 

03E3 3C 20 0867 CMP AL") ;Go to next address 

O3E5 74 31 0868 JZ NEXT 

03E7 0869 ;1f we got here, character was invalid. Sound bell. 

03E7 BO 07 0870 MOV AL ,7 

03E9 E8 73 FD 0871 CALL OUT 

O3EC E3 E2 0872 JCXZ WAIT ;CX=0 means no more digits 
O3EE EB CB 0873 JMPS GETDIG ;Don’t have 2 digits yet 
03F0 0874 BS: 

03FO 82 F9 02 0875 CMP CL,2 ;CX=2 means nothing typed yet 
03F3 74 Cé 0876 JZ GETDIG ;Can’t back up over nothing 
O3F5 FE C1 0877 INC CL ;Accept one more character 
03F7 8A Dé 0878 MOV DL ,DH ;Rotate out last digit 

03F9 8A FS 0879 MOV DH,CH ;Zero this digit 

03FB E8 08 FD 0880 CALL BACKUP ;Physical backspace 

O3FE EB BB 0881 JMPS GETDIG ;Get more digits 

0400 0882 

0400 0883 ;I1f new value has been entered, convert it to binary and 
0400 0884 ;put into memory. Always bump pointer to next location 
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FO 


F3 


02 


FC 


00 


FA 


0885 
0886 
0887 
0888 
0889 
0890 
0891 
0ag2 
0893 
0894 
0895 
0896 
0897 
0898 
0899 
0900 
0901 
0902 
0903 
0904 
0905 
0906 
0907 
0908 
0909 
0910 
0914 
0912 
0913 
0914 
0915 
0916 
0917 
0918 
0919 
0920 
0921 
0922 
0923 
0924 
0925 
0926 
0927 
0928 
0929 
0930 
0931 
0932 
0933 
0934 
0935 
0936 
0937 
0938 
0939 
0940 
0941 
0942 
0943 
0944 
0945 
0946 
0947 
0948 
0949 
0950 
0951 
0952 
0953 
0954 
0955 
0956 
0957 
0958 
0959 
0960 
0961 
0962 
0963 
0964 
0965 
0966 
0967 
0968 
0969 
0970 
0971 
0972 
0973 


STORE: 


;Rotate 


NOSTO: 


EOL: 


NEXT: 


NEWROW : 


PREV: 
;D1 has 
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CMP cL,2 ;CX=2 means nothing typed yet 
JZ NOSTO ;So no new valve to store 

DH left 4 bits to combine with DL and make a byte value 
PUSH Cx 

MOV CL,4 

SHL DH,CL 

POP Cx 

OR DL,DH j;Hex is now converted to binary 
SEG ES 

MOV CD13,DL ;Store new value 

INC DI ;Prepare for next location 

RET 

CALL STORE ;Enter the new value 

JMP CRLF ;CR/LF and terminate 

CALL STORE ;Enter new valve 

INC Cx ;Leave a space plus two for 

INC cx » each digit not entered 

CALL TAB 

MOV AX,D1 ;Next memory address 

AND AL,7 ;Check for 8-byte boundary 

JNZ GETBYTE ;Take 8 per line 

CALL CRLF ; Terminate line 

JMP GETROW ;Print address on new line 

CALL STORE ;Enter the new value 

been bumped to next byte. Drop it 2 to go to previous addr 
DEC DI 

DEC DI 

JMPS NEWROW ;Terminate line after backing up 


;Perform register dump if no parameters or set register if a 
;register designation is a parameter. 


REG: 


NOTPC: 


RET3: 
BADREG : 


SCANP 
DISPREG 
DL,CD13 
DI 
DH,CDII 
DH, 13 
FLAG 

D1 
GETEOL 
DH," * 
FLAG 

D1 ,REGTAB 
AX ,DX 
cs 


ES 
CX, REGTABLEN 


DX, CBXI 


CBXI ,DxX 


AX ,5200H+"B" ;BR ERROR 
ERR 
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Bé 01 


07 
00 


OF 


00 


10 


FC 


Bé 01 


0974 DISPREG: 


0975 
0976 
0977 
0978 
0979 
0980 
0981 
0982 
0983 
0984 
0985 
0986 
0987 
0988 
0989 
0990 
0991 
0992 
0993 
0994 
0995 
0996 
0997 
0998 
0999 
1000 
1001 
1002 
1003 
1004 
1005 
1006 
1007 
1008 
1009 
1010 
1011 
1012 
1013 
1014 
1015 
1016 
1017 
1018 
1019 
1020 
1021 
1022 
1023 
1024 
1025 
1026 
1027 
1028 
1029 
1030 
1031 
1032 
1033 
1034 
1035 
1036 
1037 
1038 
1039 
1040 
1041 
1042 
1043 
1044 
1045 
1046 
1047 
1048 
1049 
1050 
1051 
1052 
1053 
1054 
1055 
1056 
1057 
1058 
1059 
1060 
1061 
1062 
1063 
1064 


FLAG: 


GETFLG: 


NEXFLG: 


REPFLG: 
FERR: 
ERR: 


SAVCHG: 


FLGERR: 


DFLAGS: 


S1,REGTAB 
BX , AXSAVE 
CX,8 
DISPREGL INE 
CRLF 

Cx,5 
DISPREGL INE 
BLANK 


DISPFLAGS 
CRLF 


AL,"-" 


BX ,BX 

Dx , CFSAVEI 
$1,D1 

AL, 13 
SAVCHG 

AH, 13 
FLGERR 
DI,FLAGTAB 
Cx, 32 


cs 
ES 


BI 
DISPREGL INE 


AX, 4600H+"D" 
SAVCHG 


CFSAVEI ,DX 
AX, 4600H+"B" 
FERR 
S1,FLAGTAB 
CX,16 

DX, CFSAVEI 


cs 


;DF ERROR 


;BF ERROR 


O1 
Te 
2E 
8B 


0B 
Th 
E8 
8A 
E8 
E8 


E2 
c3 


87 
FF 
87 


Ec 
Ec 


1E 


FB 


FB 
FB 


00 


AY 
BO 


O41 


41 
11 


00 00 
01 


DS 05 
De 05 


Dc 05 


1065 
1066 
1067 
1068 
1069 
1070 
1071 
1072 
1073 
1074 
1075 
1076 
1077 
1078 
1079 
1080 
1081 
1082 
1083 
1084 
1085 
1086 
1087 
1088 
1089 
1090 
1091 
1092 
1093 
1094 
1095 
1096 
1097 
1098 
1099 
1100 
1101 
1102 
1103 
1104 
1105 
1106 
1107 
1108 
1109 
1110 
1111 
1112 
1113 
1114 
1115 
1116 
1117 
1118 
1119 
1120 
1121 
1122 
1123 
1124 
1125 
1126 
1127 
1128 
1129 
1130 
1131 
1132 
1133 
1134 
1135 
1136 
1137 
1138 
1139 
1140 
1141 
1142 
1143 
1144 
1145 
1146 
1147 


1148 


1149 
1150 
1151 
1152 
1153 
1154 


8086 Monitor 


race mode. Registers are all 


t. Need to decrement instruction 
ion where breakpoint actually 


saved so they can be 


SHL Dx 

Jc FLAGSET 

SEG cs 

MOV Ax, €S1+303 
FLAGSET: 

AX, AX 

JZ NEXTFLG 

CALL OUT 

MOV AL, AH 

CALL OUT 

CALL BLANK 
NEXTFLG: 

LOOP DFLAGS 

RET 
;Trace 1 instruction or the number of instruction specified 
;by the parameter using 8086 t 
;set according to values in save area 
TRACE: 

CALL SCANP 

CALL HEXIN 

MOV Dx,1 

JC STOCNT 

MOV CX,4 

CALL GETHEX 
STOCNT: 

MOV CTCOUNTI , DX 

CALL GETEOL 
STEP: 

MOV CBRKCNTI, 0 

OR B,CFSAVE+13,1 
EXIT: 

MOV C127, BREAKF 1X 

MOV C143,Cs 

MOV C43,REENTER 

MOV C63,CS 

Dl 

MOV C64HI,REENTER 

MOV C66HI,CS 

MOV SP, STACK 

POP AX 

POP Bx 

POP cx 

POP Dx 

POP BP 

POP BP 

POP Sl 

POP Ol 

POP ES 

POP ES 

POP ss 

MOV SP ,CSPSAVEI 

PUSH CFSAVEI 

PUSH CCSSAVEI 

PUSH CIPSAVEI 

MOV Ds , CDSSAVEI 

IRET 
STEP1: JMPS STEP 
;Re-entry point from breakpoin 
j;pointer so it points to locat 
;occured. 
BREAKF 1X: 

XCHG SP, BP 

DEC CBPI 

XCHG SP ,BP 
;Re-entry point from trace mode or interrupt during 
execution. All registers are 
;displayed or modified. 


REENTER: 
SEG 


cs 
MOV CSPSAVE+SEGDIFI, SP 
SEG cs 
MOV CSSSAVE+SEGDIFI,SS 
XOR sp ,SP 
MOV ss, SP 
MOV SP ,RSTACK 
PUSH ES 
PUSH os 
PUSH DI 
PUSH SI 
PUSH BP 
DEC SP 
DEC SP 
PUSH DX 
PUSH cx 
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OSF6 53 1155 PUSH BX 

OSF7 50 1156 PUSH AX 

O5F8 16 1157 PUSH ss 

OSF9 1F 1158 POP DS 

OSFA 8B 26 A+ 01 1159 MOV SP ,CSPSAVEI 

OSFE 8E 16 BO 01 1160 MOV SS ,CSSSAVEI 

0602 8F 06 BS 01 1161 POP CIPSAVEI 

0606 8F 06 B2 01 1162 POP CCSSAVEI 

060A 58 1163 POP AX 

060B 80 E+ FE 1164 AND AH, OFEH 

060E A3 B6 01 1165 MOV CFSAVEI, AX 

0611 89 26 A¥ 01 1166 MOV CSPSAVE3 , SP 

0615 1E 1167 PUSH DS 

0616 07 1168 POP ES 

0617 1€ 1169 PUSH DS 

0618 17 1170 POP ss 

0619 BC 9C 01 1171 MOV SP, STACK 

061C C7 06 64 00 BF 06 1172 MOV C64HI, INT 

0622 BO 20 1173 MOV AL ,20H 

0624 ES Fe 1174 OUT BASE+2 

0626 FB 1175 El 

0627 FC 1176 UP 

0628 E8 CO FA 1177 CALL CRLF 

062B E8 6C FE 1178 CALL DISPREG 

062E FF OE 02 01 1179 DEC CTCOUNTI 

0632 75 9F 1180 JNZ STEP1 

0634 1181 ENDGO: 

0634 BE 04 01 1162 MOV S1,BPTAB 

0637 8B OE 00 01 1183 MOV CX, CBRKCNTI 

063B E3 10 1184 JCXZ COMJMP 

063D 1185 CLEARBP: 

063D 8B 54 14 1186 MOV DX ,CS1+BPLENI 

0640 AD 1187 LoDSwW 

0641 50 1188 PUSH AX 

0642 E8 55 FB 1189 CALL GE SEG 

0645 8E CO 1190 MOV ES , AX 

0647 8B FA 1191 MOV 01 ,DXx 

0649 58 1192 POP AX 

064A AA 1193 STOSB 

064B E2 FO 1194 LOOP CLEARBP 

064D E9 2C FA 1195 COMJMP: JMP COMMAND 

0650 1196 

0650 1197 ;Input from the specified port and display result 
0650 1198 

0650 1199 INPUT: 

0650 B9 04 00 1200 MOV CX,4 ;Port may have 4 digits 
0653 E8 90 FC 1201 CALL GETHEX ;Get port number in DX 
0656 EC 1202 INB Dx ;Variable port input 
0657 E8 FO FA 1203 CALL HEX yAnd display 

065A E9 8E FA 1204 JMP CRLF 

065D 1205 

065D 1206 ;Output a value to specified port. 

065D 1207 

065D 1208 OUTPUT: 

065D BO 04 00 1209 MOV CX,4 ;Port may have 4 digits 
0660 E8 83 FC 1210 CALL GETHEX ;Get port number 
0663 52 1211 PUSH DX ;Save whiie we get data 
0664 BY 02 00 1212 MOV Cx,2 ;Byte output only 
0667 E8 7C FC 1213 CALL GETHEX ;Get data to output 
066A 92 1214 XCHG AX ,DX ;Output data in AL 
066B 5A ' 1215 POP DX ;Port in DX 

066C EE 1216 OUTB Dx ;Variable port output 
066D C3 1217 RET 

066E 1218 

066E 1219 ;Jump to program, setting up registers according to the 
066E 1220 ;save area. Up to 10 breakpoint addresses may be specified, 
066E 1221 

066E 1222 GO: 

066E BB 18 01 1223 MOV BX, LINEBUF 

0671 33 Fé 1224 XOR SI,S1 

0673 1225 GO1: 

0673 E8 9D FA 1226 CALL SCANP 

0676 74 19 1227 JZ EXEC 

0678 BY 05 00 1228 MOV CX,5 

067B E8 68 FC 1229 CALL GETHEX 

O067E 89 17 1230 MOV CBXI,DX 

0680 88 67 ED 1231 MOV CBX-BPLEN+ 1, AH 

0683 43 1232 INC BX 

0684 43 1233 INC BX 

0685 46 1234 INC Sl 

0686 83 FE 0B 1235 CMP SI ,BPMAX+1 

0689 75 E8 1236 JNZ Go1 

068B B8 42 50 1237 MOV AX ,5000H+"B" ;BP ERROR 

068E E9 9F FE 1238 JMP ERR 

0691 1239 EXEC: 

0691 89 36 00 01 1240 MOV CBRKCNTI,S1 

0695 E8 CE FC 1241 CALL GETEOL 

0698 8B CE 1242 MOV Cx,SI 

069A E3 1A 1243 JCXZ NOBP 

069C BE 04 01 1244 MOV S1,BPTAB 
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FA 


01 01 00 


58 43 58 44 
42 50 53 49 
53 45 53 53 
49 50 50 43 


1245 
1246 
1247 
1248 
1249 
1250 
1251 
1252 
1253 
1254 
1255 
1256 
1257 
1258 
1259 
1260 
1261 
1262 
1263 
1264 
1265 
1266 
1267 
1268 
1269 
1270 
1271 
1272 
1273 
1274 
1275 
1276 
1277 
1278 
1279 
1280 
1281 
1282 
1283 
1284 
1285 
1286 
1287 
1288 
1289 
1290 
1291 


1292 
1293 
1294 
1295 
1296 
1297 
1298 
1299 
1300 
1301 
1302 
1303 
1304 
1305 
1306 
1307 
1308 
1309 
1310 
1311 
1312 
1313 
1314 
1315 
1316 
1317 
1318 
1319 
1320 
1321 
1322 
1323 
1324 
1325 
1326 
1327 
1328 
1329 
1330 
1331 


SETBP: 


NOBP : 


DX ,CS1+BPLENI 


GETSEG 
DS , AX 
D1 ,Dx 
AL,CO13 


B,CD13,0CCH 


ES 

DS 
CS1-23,AL 
SETBP 


CTCOUNTI, 1 


EX1T 


8086 Monitor 


;Console input interrupt handler. Used to interrupt commands 
;0r programs under execution (if they have interrupts 
;enabled). Control-S causes a loop which waits for any other 
;character to be typed. Control-C causes abort to command 
;mode. All other characters are ignored. 


;Don’t destroy accumulator 


;Output End-of-Interrupt commands to slave 8259A. 


;Get interrupting character 
;ASCII has only 7 bits 
;Check for Control-S 

;Wait for continue character 


;Check for Contro!-C 


interrupt - restore AX and return 
AX 


" AXBXCXDXSPBPSIDIDSESSSCSIPPC" 


;Flags are ordered to correspond with the bits of the flag 
;register, most significant bit first, zero if bit is not 
ja flag. First 16 entries are for bit set, second 16 for 


INT: 
PUSH AX 
MOV AL ,20H 
OUT BASE+2 
IN DATA 
AND AL ,7FH 
CMP AL, “6"="@° 
JNZ NOSTOP 
CALL IN 
NOSTOP : 
CMP AL ,*C*-"@" 
JZ BREAK 
j;Just ignore 
POP 
IRET 
BREAK: 
MOV AL"? 
CALL OUT 
MOV AL,‘C’ 
CALL OUT 
CALL CRLF 
JMP COMMAND 
REGTAB: 
REGDIF: EQU AXSAVE-REGTAB 
;bit reset. 
FLAGTAB: 
DW 0 
DW 0 
DW 0 
DW ) 
DB "ov" 
OB "DN" 
OB bl = 
Dw 0 
DB "NG" 
DB *ZRE 
OW 1) 
DB "AC" 
OW 0 
OB SPE" 
Dw 0 
OB ECY® 
Ow 0 
DW 0 
OW 0 
DW 0 
OB "NV" 
DB "UP" 
DB "DI" 
DW 0 
0B "PL" 
DB "NZ" 
Ow 0 
DB "NA" 
DW ) 
DB "PO" 
DW 0 
DB "NC" 


Listing 
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0741 1332 

0741 1333 Initialization table. First byte of each entry is no. 

0741 1334 :of bytes to output to the corresponding port. That 

O741 1335 ;many initialization bytes follow. 

0741 1336 

0741 1337 INITTABLE: 

0741 1338 ;Port BASE+0 - Master 8259A. Intialization Command Word (1CW) 
O741 1339 ;One sets level-triggered mode, multiple 8259As, require 
O741 1340 ;1CW4. 

0741 01 1341 DB 1 . 

0742 19 1342 DB 19H 

0743 1343 ;Port BASE+1 - Master 8259A. ICW2 sets vector base to 10H 
0743 1344 ;ICW3 sets a slave on interrupt input 1; 1CW4 sets buffered 
0743 1345 ;mode, as a master, with Automatic End of Interrupt, 8086 
0743 1346 ;vector; Operation Command Word (OCW) One sets interrupt 
0743 1347 ;mask to enable line 1 (slave 8259A) only. 

0743 04 1348 DB 4 

0744 10 02 OF FD 1349 DB 10H,2,0FH, OFDH 

0748 1350 ;Port BASE+2 - Slave 8259A. ICW1 sets level-triggered mode, 
0748 1351 ;multiple 8259As, require ICW4. 

0748 01 1352 OB 1 

0749 19 1353 OB 19H 

074A 1354 ;Port BASE+3 - Slave 8259A. ICW2 sets vector base to 18H 
O74A 1355 ;ICW3 sets slave address as 1; ICW4 sets buffered mode, 
O74A 1356 ;as slave, 8086 vector; OCW1 sets interrupt mask 

O74A 1357 ;to enable line 1 (serial receive) only. 

O74A O04 1358 DB 4 

074B 18 01 09 FD 1359 DB 18H, 1,09H, 0FDH 

O74F 1360 ;Port Base+4 - 9513 Data. 9513 has previously been set 

O74F 136i ;up for master mode register. Master Mode now set to 84F3H: 
O74F 1362 ;Scaler set to BCD division, enable data pointer increment, 
O74F 1363 ;8-bit data bus, FOUT=100Hz, dividing F5 by 4 (FS=4MHz/10000) 
O74F 364 ;Both alarm comparators disabled, time-of-day enabled 

O74F 02 1365 DB 2 

0750 F3 84 1366 Ow 84F3H 

0752 1367 ;Port BASE+5 - 9513 Control. Do nothing. 

0752 00 1368 DB 0 

0753 1369 ;Pert BASE+6 - 8251A #1 Data. No initialization to this port. 
0753 00 1370 OB 0 

0754 1371 ;Pert BASE+7 - 8251A #1 Control. Since it is not possible to 
0754 =: 1372 ;know whether the 8251A next expects a Mode Instruction or 
0754 1373 ;a Command Instruction, a dummy byte is sent which could 
0754 1374 ;safely be interpreted as either but guarantees it is now 
0754 1375 ;expecting a Command. The command sent is Internal Reset 
0754 1376 ;which causes it to start expecting a mode. The mode sent 
0754 1377 ;is for 2 stop bits, no parity, 8 data bits, 16X clock. 
0754 1378 ;This is followed by the command to error reset, enable 
0754 1379 ;transmitter and receiver, set RTS and DTR to +1eV. 

0754 04 1380 bB 4 

0755 B7 77 CE 37 1381 DB 0B7H,77H, OCEH, 37H 

0759 1382 ;Port BASE+8 - 8251A #2 Data. No init. 

0759 00 1383 DB 0 

075A 1384 ;Port BASE+9 - 8251A #2 Control. Same as above, except one stop bit 
O75A 04 1385 OB 4 

075B B7 77 4E 37 1386 Da 0B7H,77H, 4EH, 37H 

O75F 1387 ;Port BASE+10 - Baud rate 1. Set to 19200 baud 

O75F 04 1388 OB 1 

0760 OF 1389 DB OFH 

0761 1390 ;Posr BASE+11 - Baud rate 2. Set to 9600 baud 

0761 01 ~—~- 1391 DB 1 

0762 0E 1392 DB OEH 

0763 1393 

0763 0D 0A 0A 53 43 50 20 1394 HEADER: DM 13,10,10,"SCP 8086 Monitor 1.9",13,10 


38 30 38 36 20 4D 6F 
6E 69 74 6F 72 20 31 


2E 39 0D BA 
077C SE 1395 SYNERR: DB nae 
077D 20 45 72 72 6F 72 0D 1396 ERRMES: DM " Error",13,10 
8A 
0785 08 20 88 1397 BACMES DM 8,32,8 
0788 1398 
0788 ' 1299 BOOT: 
0788 57 1400 PUSH DI 
0789 E4 FF * . 1401 NB BASE+15 ; Get sense switch data. 
078B A8& 04+ . 71402 TEST AL,4+ ; Test floppy/hard boot 
078D 74 03 ‘ 1403 JZ FLOPPY 
O78F E9 OF 00 M 1404 JMP HARD ; Try hard disk boot 
0792 * 1405 FLOPPY: 
0792 1406 
0792 1407 ;Block move the boot code to RAM. 
0792 * 4408 ;1f the RAM is 16-bit, then we’ll be able to boot double-density 
0792 1409 ;at 4MKz CPU clock (great for 8087 work). 
0792 1410 
0792 BE DD 08 1411 : MOV S1,BOOTPROG 
0795 BF 80 00 1412 MOV D1, BOOTADDR 
0798 B9 28 00 1413 MOV CX ,BOOTLEN 
079B 2E 1414 SEG cs 
079C F3 1415 REP 
079D A5 1416 MOVSW 
079E E9 DF 08 1417 JMP BOOTADDR+SEGDI1F 
O7A1 1418 
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BE “ 


E8 


A6 
50 


cy 


2 FE 


08 
00 


01 


02 00 


01 


0B 05 00 


00 


00 


1419 
1420 
1424 
1422 
1423 
1424 
1425 
1426 
1427 
1428 
1429 
1430 
1434 
1432 
1433 
1434 
1435 
1436 
1437 
1438 
1439 
14440 
1444 
1442 
1443 
rere 
1445 
1446 
1447 
1448 
1449 
1450 
1454 
1452 
1453 
1454 
1455 
1456 
1457 
1458 
1459 
1460 
1464 
1462 
1463 
1464 
1465 
1466 
1467 
1468 
1469 
1470 
1474 
1472 
1473 
1474 
1475 
1476 
1477 
1478 
1479 
1480 
1481 
1482 
1483 
1484 
1485 
1486 
1487 
1488 
1489 
1490 
1494 
1492 
1493 
1454 
1495 
1496 
1497 
1498 
1499 
1500 
1504 
1502 
1503 
1504 
1505 


8086 Monitor Listing 


; Hard disk boot code 
RESETHDC EQu S4H 
STARTHDC EQu SSH 
TIMEOUT EQU a yd 
HDRVS EQu 3 ; Drive select byte in data structure 
STATH EQU 12 ; Status byte in data structure 
OPCcD EQU 11 ; Opcode byte 
HARD: 
; Try hard disk boot. If drive is not ready after 1 minute display message 
3; and jump to floppy boot. 
cLi ; Disable keyboard interrupt 
MOV SI,WA1TMSG 
CALL PRINTMES 
MOV S1,50H 
PUSH DS 
PUSH cs 
PoP DS ; Make DS here 
3 Set HDCMA data structure just below boot sector code. Keep address fixed so 
; the boot sector code can use it too. 
MOV AX, 1E0H 
SEG ES 
MOV CS13,Ax 
SEG ES 
MOV B,CS1+23,0 ; Extended address is 0 
; Move the prefixed HDCMA data structure. Structure initially set up for load 
} constants operation. 
MOV $1,DATASTRUCT 
MOV DI, 1E0H 
MOV CX, 16 
REP 
MOVSB 3 Move it 
OUTB RESETHDC ; Reset the HDC 
; Delay controller commands after reset. 
XOR CX ,CX 
LOOP $ 
; Test status, if not ready, try again for 1 minute. 
POP OS ; Restore DS to 0 
MOV $1, 1E0H 
MOV DL,2 ; 2 * 741 msec. 
MOV CS1+OPCDI,5 ; Sense status 
HARDT IME : 
XOR CX ,CX 
TRY: 
CALL HARDCOM ; Execute command 
TEST AL, 4+ ; Drive ready status 
LOOPNZ TRY 
JZ RESTORE ; Drive is ready ! 
DEC DL 
JNZ HARDT IME 
; Hard disk is not ready after retries. Display message then go to floppy 
; disk boot. 
HDERROR : 
STl ; Re-enable keyboard interrupt 
MOV S1,NOHARD 
CALL PRINTMES » 'Hard disk error. Insert boot disk in A’ 
JMP FLOPPY ; Floppy disk boot 
; Restore HDC to outer track. Read 1st sector to 0:200H 
RESTORE: 
SI ,READYMSG 
CALL PRINTMES 
MOV S1,1E0H 
MOV CS1+OPCDI, 4 ;} Load constants command 
CALL HARDCOM 
JNZ HDERROR 
MOV B,CS1+0PCDI,0 ; Read opcode 
MOV B,CS13,10H ; Step out 
MOV W,CS1+13,-1 ; Restore to track 0 
MOV W,CSI+HDRVS+13,200H ; Set DMA address to 200H 
MOV W,CS1+HDRVS+43,0 ; Read ist cylinder 
MOV W,CSI+HDRVS+60, 100H ;} Read head # 0, sector # 1 
MOV cx,3 3} Try count 
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081F 1506 
081F E8 2F 00 1507 
0822 Cé 04 00 1508 
0825 C7 44 01 00 00 1509 
082A E0 F3 1510 
082C 75 Bé 1511 
082E 1512 
082E 1513 
082E 1514 
082E 5F 1515 
082F 1516 
082F 1517 
082F 1518 
082F C7 06 B2 01 00 00 1519 
0835 C7 06 B4 01 00 02 1520 
083B E4 FF 1521 
083D A8 01 1522 
083F 75 03 1523 
0841 E9 2A FE 1524 
0844 1525 
0844 FF 36 Be 01 1526 
0848 FF 36 B4 01 1527 
084C BE 1E AC 01 1528 
0850 CF 1529 
0851 1530 
0851 1531 
0851 1532 
0851 1533 
0851 1534 
0851 B3 11 1535 
0853 51 1536 
0854 33 C9 1537 
0856 Cé 44 0C 00 1538 
085A Eé 55 1539 
085C 1540 
O085C 8A 44 0C 1541 
O85F 0A CO 1542 
0861 E1 F9 1543 
0863 75 04 1544 
0865 FE CB 1545 
0867 75 F3 1546 
0869 1547 
0869 59 1548 
086A 3C FF 1549 
086C C3 1550 
086D 1551 
086D 1552 
086D 1553 
086D 1554 
086D 1555 
086D 1556 
086D 00 1557 
O86E 00 00 1558 
0870 DC 1559 
0871 00 00 1560 
0873 00 1561 
0874 1562 
0874 00 1E 1563 
0876 00 1564 
0877 07) 1565 
0878 04 1566 
0879 00 1567 
087A EO 01 1568 
087C 00 1569 
087D 1570 
087D 48 61 72 64 20 64 69 1571 

73 6B 20 65 72 72 6F 

72 2E 20 49 6E 73 65 

72 74 20 62 6F 6F 74 

20 64 69 73 6B 20 69 

6E 20 41 3A 0D 
08AS 8A 1572 
08A6 OD 0A S2 65 61 64 69 1573 

6E 67 20 68 61 72 64 

20 64 69 73 6B 2C 20 

70 6C 65 61 73 65 20 

77 61 69 7% 2E 0D 8A 
08C9 48 61 72 64 20 64 69 1574 

73 6B 20 69 73 20 72 

65 61 64 79 0D 8A 
08DD 1575 
08DD 1576 
08DD 1577 
08DD 1578 
08DD 1579 
08DD 1580 
08DD 1581 
0sDD 1582 
08DD 1583 
08DD 1584 
08pD 1585 


30 


READHARD: 
CALL. HARDCOM ; Do it 
MOV B,CS13,0 ; Step in 
MOV wW,CS1+13,0 ; No step 
LOOPNZ READHARD 
JNZ HDERROR ; Couldn’t read, display error. 
; We have successfully read the boot sector. Jump to it at location 0:200H 
POP DI 
; Test sense switch. If auto-boot is set,don’t return to monitor 
MOV CCSSAVEI, 0 
MOV CIPSAVEI,LOAD 
INB BASE+15 ; Get sense switch data. 
TEST AL,1 3 Test auto-boot 
JNZ AUTOBOOT 
JMP GO 
AUTOBOOT : 
PUSH CCSSAVEI 
PUSH CIPSAVEI 
MOV DS , CDSSAVE 
IRET 
; Hardisk 1/0 command routine 
HARDCOM: 
MOV BL , TIMEOUT 
PUSH Cx 
XOR CX ,CX 
MOV B,CSI+STATHI,0 ; Clear status 
OUTB STARTHDC 
HWAIT: 
MOV AL ,CS1+STATHI 7 Status byte 
OR AL,Al 
LOOPZ HWAIT ; Try for 2 seconds 
JNZ HRET 
DEC BL 
JNZ HWAI1T 
HRET: 
POP Cx 
CMP AL,-1 
RET 
3; HDCMA data structure for load constants operation. Moved to 2nd page 
3; in memory for HDC to execute. 
DATASTRUCT : 
HDIR DB 0 ; Step in 
HSTEP DW 0 ; Amount to step 
HDRIVE OB ODCH ; Drive/head select 
DMAAD DW 0 ; DMA address 
DMAHI DB 0 
ARG1: 
HCYL DB 0,1EH ; 3 msec step delay time 
HHEAD DB 0 ; No head settle time 
HSECT DB 6 ; Sector = 1024 bytes 
OPCODE DB 4 ; Load constants command 
HSTAT DB 0 ; Return status 
LINK Dw 1E0H 
DB 0 ; Link extended address 
NOHARD DB ‘Hard disk error. Insert boot disk in A:',13 
DB 8AH ; End of message code 
WA1TMSG DB 13,10,’Reading hard disk, please wait.’ ,13,8AH 
READYMSG DB ‘Hard disk is ready’,13,8AH 
BOOTPROG: 
IF scp 
DISK: EQU OEOH 
WAITP: EQU DISK+5 
ENDIF 
1F TARBELLDD 
DISK: EQU 78H 
WAITP: EQU DISK+4 


E+ 
B1 
D2 
24 
8A 


5 DO 


73 


05 00 


F7 08 


00 02 


E3 00 


06 Be 01 00 00 
06 B4 01 00 02 


9E FS 


1586 
1587 
1588 
1589 
1590 
1591 
1892 
1593 
1594 
1595 
1596 
1597 
1598 
1599 
1600 
1601 
1602 
1603 
1604 
1605 
1606 
1607 
1608 
1609 
1610 
1611 
1612 
1613 
1614 
1615 
1616 
1617 
1618 
1619 
1620 
1621 
1622 
1623 
1624 
1625 
1626 
1627 
1628 
1629 
1630 
1631 
1632 
1633 
1634 
1635 
1636 
1637 
1638 
1639 
1640 
1641 
1642 
1643 
1644 
1645 
1646 
1647 
1648 


DELAY: 


RETRY: 


JNZ 


BOOTLEN EQU 


read 


TARBELLDD 
BH, BH 


AL, ODOH 
DISK 
CX,5 


DELAY 
BH, 08H 


OX ,DISK+3 
AL ,8CH 
DISK 
READ 


WAITP 


scP 

AL 

DX 
READLOOP 


TARBELLDD 
AL 

Dx 
READLOOP 


DISK 
AL , 9CH 
RETRY 


CCSSAVEI, 0 
CIPSAVEI, LOAD 
DI 

GO-SEGDIF 


( $-BOOTADDR+11)/2 
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Get sense switch data. 

Shift bit 1 over to bit 4 so it 
can be used for large/small bit. 

Keep only the large/small bit. 

Put drive select byte in BH. 


Force-interrupt command. 


Give force-interrupt time. 


Flip density bit. 


Select drive type & density 
Restore command. 


Wait for INTRQ. 
Ask for sector 1. 


Disk controller data port. 
Read command. 


Put data in memory. 
Wait for DRG or INTRQ. 
Check for INTRQ. 


Read data from disk controller chip. 
Jump if no INTRQG 


Check for INTRQ. 
Read data from disk controller chip. 
Jump if no INTRG 


Get status. 


Jump if error. 


a1 


